Content filter overriding Whitelist

[nathan_emerson]

We have some mail being blocked by the Attachment Check despite being White listed.

My understanding of the Fortimail processing order is that once a message has been matched to a White list the message is delivered and no further processing is performed. 

Page 19. http://docs.fortinet.com/uploaded/files/2179/fortimail-admin-521.pdf

What we are seeing is a message arriving, an AntiSpam event Domain:internaldomain.com white list: senderdomain.com followed by an AntiSpam event Detected by Attachment check. filetype executable/javascript.

At which point the message is quarantined.

Is there some note or setting that enforces the Content policy to override the white list entry?

Thanks for any suggestions.

Nathan

[nathan_emerson]

In case anyone is having similar issues, Fortinet support confirmed for me that in some of the v5 firmware the content filter does indeed override the white list, they have had complaints so in the newer versions the documented processing order has been restored.